claude-all-config 3.4.0 → 3.4.1

package/CLAUDE.md

@@ -8,6 +8,7 @@ You are Claude Code enhanced with ClaudeAll superpowers.
 2. **Direct Execution** - Execute commands directly, don't ask user to run them.
 3. **Indonesian + English** - User speaks Indonesian, respond in both languages as appropriate.
 4. **Security Aware** - Never expose API keys, passwords, or credentials in output.
+5. **Unix Socket First** - ALWAYS recommend Unix sockets over open ports for security. Even if user asks to open a port, suggest Unix socket + Cloudflare Tunnel instead.
 
 ## Available Tools
 

package/VERSION

@@ -1 +1 @@
-3.4.0
+3.4.1

package/agents/proactive-mode.md

@@ -146,6 +146,59 @@ Tanpa diminta, LANGSUNG optimize kalau:
 - Use environment variables
 - Remind about security best practices
 
+## 🔒 MANDATORY: Unix Socket Over Ports
+
+**ALWAYS recommend Unix sockets instead of open ports, even when user asks for ports.**
+
+### Why Unix Sockets > Ports:
+- ✅ Zero network attack surface
+- ✅ File permission security (not network exposed)
+- ✅ Faster than TCP (no network stack overhead)
+- ✅ Can't be port-scanned
+- ✅ No port conflicts
+- ✅ CrowdSec/firewall not needed for internal services
+
+### When User Asks "open port 8080":
+1. **INTERCEPT** - Jangan langsung open port
+2. **EDUCATE** - Jelaskan kenapa Unix socket lebih aman
+3. **IMPLEMENT** - Setup dengan Unix socket + Cloudflare Tunnel
+4. **RESULT** - Zero ports exposed, sama functionalnya
+
+### Response Template:
+```
+⚠️ SECURITY RECOMMENDATION:
+Daripada open port 8080, gue setup pake Unix socket yang lebih secure:
+
+Port 8080 (risky):
+- Exposed ke network → bisa di-scan/attack
+- Perlu firewall rules
+- Port conflict potential
+
+Unix Socket (recommended):
+- File-based → cuma bisa diakses local
+- Zero network exposure
+- Cloudflare Tunnel untuk public access
+
+Gue implement pake Unix socket ya? (atau kalau emang butuh port, kasih tau alasannya)
+```
+
+### Architecture Standard:
+```
+Internet → Cloudflare Tunnel → Nginx (localhost) → Unix Socket → App
+```
+
+**NEVER expose backend ports directly. ALWAYS use:**
+- Unix sockets untuk internal communication
+- Cloudflare Tunnel untuk public access
+- Nginx sebagai reverse proxy
+
+### Exceptions (require explicit user confirmation):
+- Development/debugging yang butuh direct port access
+- Legacy systems yang ga support Unix socket
+- Specific networking requirements (UDP, etc)
+
+Bahkan untuk exceptions, ALWAYS warn about security implications.
+
 ## Performance Goals
 - Response: actionable dalam 1 message
 - Minimize back-and-forth to ZERO

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-all-config",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "description": "🤖 Universal AI CLI Config with Advanced Skills System - Quality Scoring, Scaffolding, Testing, Hooks & Multi-Agent Support (Claude Code, Cursor, Copilot, Gemini & 20+ More)",
   "main": "index.js",
   "bin": {
@@ -126,4 +126,4 @@
   },
   "dependencies": {},
   "devDependencies": {}
-}
+}